nuxt Code Injection vulnerability

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2023-3224 · ADVISORY
• nuxt/nuxt · WEB
• nuxt/nuxt commit 65a8f4e · WEB
• nuxt/nuxt commit 72ba53e · WEB
• nuxt/nuxt · PACKAGE
• nuxt/nuxt · WEB
• huntr.dev/bounties/1eb74fd8-0258-4c1f-a904-83b52e373a87 · WEB

Lỗ hổng khác của nuxt

• CVE-2026-56301TRUNG BÌNH 5.5Nuxt 4.0.0 before 4.4.7 and 3.18.0 before 3.21.7, when running the development server (nuxt dev) on Linux, binds the vite-node IPC server to…
• CVE-2026-56698TRUNG BÌNH 6.1Nuxt versions 4.0.0 before 4.4.7 and 3.x before 3.21.7 fail to validate script-capable URLs in the navigateTo open option, allowing client-s…
• CVE-2026-56697TRUNG BÌNH 6.1Nuxt versions 4.0.0 before 4.4.7 and 3.x before 3.21.7 accept protocol-relative paths such as //evil.com in the reloadNuxtApp function; thes…
• CVE-2026-56326TRUNG BÌNH 6.1Nuxt versions 4.0.0 before 4.4.7 and 3.x before 3.21.7 contain a server-side open redirect vulnerability in navigateTo that fails to properl…
• CVE-2026-56317TRUNG BÌNH 6.1Nuxt before 4.4.7 (and the 3.x branch before 3.21.7) contains a cross-site scripting vulnerability in the NoScript component that writes slo…